CVE-2023-4420
A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transport Layer Security (TLS) in the SICK LMS5xx. This lack of encryption in the communication channel can lead to the unauthorized disclosure of sensitive information. The attacker can exploit this weakness to eavesdrop on the communication between the LMS5xx and the Client, and potentially manipulate the data being transmitted.
Published:Aug 24, 2023
Last Modified:Dec 9, 2024
EPS:Aug 24, 2023
EPSS Score:0.00066
CVSS Score:9.8
Affected Products
Vendor
Product
Action
Vendor
Sick
Product
Lms500
Sick
Lms500
Vendor
Sick
Product
Lms500 Firmware
Sick
Lms500 Firmware
Vendor
Sick
Product
Lms511
Sick
Lms511
Vendor
Sick
Product
Lms511 Firmware
Sick
Lms511 Firmware
Vendor
Sick
Product
Lms531
Sick
Lms531
Vendor
Sick
Product
Lms531 Firmware
Sick
Lms531 Firmware
Vendor
Sick
Product
Lms5xx
Sick
Lms5xx
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
